This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-17097 →
DEBIAN-CVE-2018-17097
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly...
Original description
The description as published by the source.
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
soundtouch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+ds1-1"}]}]
Debian:13
soundtouch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+ds1-1"}]}]
Debian:14
soundtouch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+ds1-1"}]}]
References
- advisory security-tracker.debian.org